On-Premises Connectivity Using AWS Direct Connect with Direct Connect Gateway and AWS Transit Gateway
Publication date: March 10, 2022 (Diagram history)
This architecture shows on-premises connectivity to VMware Cloud on AWS using AWS Direct Connect with a Direct Connect gateway (DXGW) associated to AWS Transit Gateway instances in multiple Regions for scalable transitive routing.
VMware Cloud on AWS networking with Direct Connect gateway and Transit Gateway architecture
The following numbered items describe the key components in this architecture:
-
The AWS Direct Connect private VIF in Region A establishes connectivity from the on-premises network to the SDDC in Region A. Similarly, the AWS Direct Connect private VIF from Region B establishes connectivity from the on-premises network to the SDDC in Region B.
-
Dual transit VIFs establish redundant, resilient connectivity from on-premises to the Direct Connect gateway (DXGW).
-
The DXGW is associated with AWS Transit Gateway in both Regions to provide on-premises connectivity to Amazon VPCs.
-
The Transit Gateway is a regional virtual router that is capable of transitive routing between networks connected to it using VPC attachments, VPN attachments, DXGW attachments, and peering attachments.
-
VPC attachments enable VPCs to establish communication with other VPCs and networks connected to the Transit Gateway.
-
The Transit Gateway peering attachment enables cross-Region communication between networks connected to Transit Gateway A and Transit Gateway B.
-
Transit Gateway VPN attachments enable communication between the SDDC and networks connected to the Transit Gateway in the respective Regions. However, the VMware VMkernel traffic (including ESXi Management, vMotion, and vSphere Replication traffic) is prioritized over the private VIF, making the VPN attachments unusable for this traffic. Ensure the VPN does not learn the on-premises routes that are used with a private VIF.
Further reading
For additional information, see the following resources:
Diagram history
To be notified about updates to this reference architecture diagram, subscribe to the RSS feed.
| Change | Description | Date |
|---|---|---|
Reference architecture diagram first published. | March 10, 2022 | |
Initial publication | Reference architecture diagram first published. | March 10, 2022 |
Reference architecture diagram first published. | March 10, 2022 | |
Reference architecture diagram first published. | March 10, 2022 |
Note
To subscribe to RSS updates, you must have an RSS plugin enabled for the browser you are using.
